Escape characters coming from user